Search This Blog

Friday, March 9, 2012

DNS Changer Virus info.....

Run "ipconfig /all" in a DOS or CMD window, look at the IP on the DNS lines. You can have two or more DNS IPs listed.

If any have the IPs listed below, you have been infected with the DNS Changer Virus. The FBI and European law enforcement agencies will be shuting the bad DNS servers down on July 8th of 2012. If you have been infected, you will no longer be able to browse the internet or use your e-mail.

The odds are you haven't been infected. It only takes a minute to see and resolve the problem. The site at the bottom of this post has a download tool to remove the virus and fix your DNS IPs.

Thomas

----------------------------------------------

Are you safe?
http://dcwg.org/checkup.html

If your computers' DNS settings use the follow ranges, then you likely have been affected by the DNS Changer viruses.

Between this IP-----and this IP
77.67.83.1----------77.67.83.254
85.255.112.1--------85.255.127.254
67.210.0.1----------67.210.15.254
93.188.160.1--------93.188.167.254
213.109.64.1--------213.109.79.254
64.28.176.1---------64.28.191.254

------------------------------------------------

Tool available for those affected by the DNS-Changer
http://www.avira.com/en/support-for-home-knowledgebase-detail/kbid/1199

The malware family of the DNS-changer manipulates the Windows network settings.

The DNS server entries are changed on the respective network adapter to achieve this. In the event of an infection, this will divert requests from web sites to malicious sites that are maintained by criminals.

The operators of those DNS servers have been arrested in November 2011 by the FBI and European law enforcement authorities. Additionally, the servers have been replaced with correctly working DNS-servers.

However, those servers will be shut down as of March 8th, 2012. [ Changed to July 8, 2012 recently.... 3/9/2012 TH ]

Computers that have been affected and did not apply the recommended changes within the settings, will not able to use the internet anymore, since the users are unable to dissolve domain names now without having access to the DNS.

Avira provides a tool for this purpose that will reset the entries to Windows standard.

Note:
The tool doesn't send any data through the internet. An installation of the tool is not required.
However, a restart of Windows will be necessary after the execution of the tool and a successful repair.

Download Avira DNS Repair-Tool
http://www.avira.com/files/support/FAQ_KB_Download_Files/EN/AviraDNSRepairEN.exe

No comments:

Post a Comment